Skip to content
PluginCanary

Pods - Custom Content Types and Fields

by Scott Kingsley Clark · 100,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 4 Sep 2026, fixed in 3.3.9.2.

82/ 100 Canary Score
Sub-scores for Pods - Custom Content Types and Fields
Ownership100
Maintenance100
Security50
Support100
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.3.9.2. Update to version 3.3.9.2 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.3.9.2. Update to version 3.3.9.2 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 3.3.9.1. Update to version 3.3.9.1 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 15 Aug 2026, fixed in 2.8.23.4. Update to version 2.8.23.4 or later.15 Aug 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sc0ttkclark9 Aug 2010 to 31 Aug 2026, 555 commits
jimtrue6 Apr 2016 to 28 Jun 2024, 17 commits
pglewis3 May 2018 to 20 Dec 2018, 20 commits
keraweb14 Nov 2019 to 2 May 2025, 6 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
39
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for Pods - Custom Content Types and Fields
Q1 202445
Q2 202410
Q3 20240
Q4 20245
Q1 20250
Q2 20252
Q3 20253
Q4 20250
Q1 20264
Q2 20261
Q3 202629
Q4 20260

Last release 31 Aug 2026. Tested with WordPress 7.1 (current).

Support

100% of 22 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute6.4<= 3.3.9.13.3.9.20
4 Sep 2026Pods – Custom Content Types and Fields 3.3 - 3.3.9.1 - Authenticated (Author+) Arbitrary File Read6.53.3 to 3.3.9.13.3.9.20
28 Aug 2026Pods – Custom Content Types and Fields < 3.3.9.1 - Authenticated (Author+) Remote Code Execution8.8< 3.3.9.13.3.9.10
15 Aug 2026Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router9.82.8 to 2.8.23.3, 2.9 to 2.9.19.3, 3.0 to 3.0.10.3, 3.1 to 3.1.4.1, 3.2 to 3.2.8.2, 3.3 to 3.3.92.8.23.40
15 Jun 2026Pods – Custom Content Types and Fields <= 3.3.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.3.83.3.90
2 Mar 2025Pods – Custom Content Types and Fields <= 3.2.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.2.8.13.2.8.2548
16 Dec 2024Pods – Custom Content Types and Fields <= 3.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.2.83.2.8.1607
15 Oct 2024Pods <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.2.73.2.7.1669
24 Jun 2024Several WordPress.org Plugins <= Various Versions - Injected Backdoor103.2.33.2.4782
9 May 2024Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL5.4<= 3.2.13.2.1.1827
28 Mar 2024Pods - Custom Content Types and Fields - Missing Authorization4.3< 2.7.31, 2.8 to 2.8.23.2, 3 to 3.0.10.22.7.31.242
28 Mar 2024Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution8.8< 2.7.31, 2.8 to 2.8.23.2, 3 to 3.0.10.22.7.31.242
28 Mar 2024Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode8.8< 2.7.31, 2.8 to 2.8.23.2, 3 to 3.0.10.22.7.31.242
20 Jan 2023Pods <= 2.9.10.2 - Cross-Site Request Forgery7.1<= 2.9.10.22.9.11398
6 Aug 2021Pods – Custom Content Types and Fields <= 2.7.28 - Authenticated (Admin+) Cross-Site Scripting5.5<= 2.7.282.7.2978
15 Jan 2021Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label field5.42.4.4.2 to 2.7.262.7.27281
15 Jan 2021Pods 2.4.4.1 - 2.7.26 - Authenticated Stored Cross-Site Scripting5.42.4.4.1 to 2.7.272.7.27281
16 Mar 2015Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection9.8< 2.5.1.22.5.1.288
12 Jan 2015Pods <= 2.4.3 - Multiple Cross-Site Request Forgery9.6<= 2.4.32.5151
12 Jan 2015Pods <= 2.4.3 - Cross-Site Scripting6.1<= 2.4.32.5151

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Pods - Custom Content Types and Fields
Q1 20243.4
Q2 20245.0
Q3 20242.3
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating rose from 3.4 to 5.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star390
4 star13
3 star4
2 star0
1 star11
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Pods - Custom Content Types and Fields
4 May 20261,747
11 May 20263,201
18 May 20266,658
25 May 202631,931
1 Jun 202612,583
8 Jun 20266,983
15 Jun 20267,544
22 Jun 20266,600
29 Jun 20265,041
6 Jul 20267,514
13 Jul 20263,451
20 Jul 20263,868
27 Jul 20263,291
3 Aug 20263,170
10 Aug 202689,800
17 Aug 202622,623
24 Aug 202610,545
31 Aug 2026104,369
7 Sep 202612,744
14 Sep 20266,491
21 Sep 20263,064
28 Sep 20262,447
5 Oct 20263,383
12 Oct 20263,525
19 Oct 20264,076
26 Oct 20263,607
2 Nov 2026500

Weekly downloads over the last 4 weeks are 79% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

ACF Content Analysis for Yoast SEOScore 91 · 100,000+Image Aspect Ratio Crop Field for Advanced Custom FieldsScore 91 · 20,000+Custom Post Types and Custom Fields creator - WCKScore 91 · 10,000+Genesis Custom BlocksScore 91 · 10,000+WPGraphQL for ACFScore 91 · 10,000+

Facts

Version3.3.9.2
AuthorScott Kingsley Clark
Added8 Oct 2008
Last updated31 Aug 2026
Active installs100,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.2
CategoryContent Management > Blog & Article Publishing
Tagspods, content types, custom fields, custom post types, Custom Taxonomies

Other plugins by this author: Pods Beaver Themer Add-On

Questions

Is Pods - Custom Content Types and Fields still maintained?

Pods - Custom Content Types and Fields was last updated on 31 Aug 2026. Its Canary status is Healthy.

Is Pods - Custom Content Types and Fields safe?

Pods - Custom Content Types and Fields has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Pods - Custom Content Types and Fields?

The wordpress.org author is Scott Kingsley Clark. Recent committers: sc0ttkclark, keraweb, jimtrue, pglewis, Shelob9. We have recorded no ownership change.

What can I use instead of Pods - Custom Content Types and Fields?

Plugins in the same category with a higher Canary Score: ACF Content Analysis for Yoast SEO, Image Aspect Ratio Crop Field for Advanced Custom Fields, Custom Post Types and Custom Fields creator - WCK, Genesis Custom Blocks, WPGraphQL for ACF.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue